<p dir="ltr">Do a clean reinstall. In your new installation, change your passwords and make sure you have the latest security updates.</p>
<div class="gmail_quote">On Sep 23, 2013 1:49 AM, "Richard Harke" <<a href="mailto:paleopenguin@gmail.com">paleopenguin@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">I may have screwed up. I opened a GIF that I received in an email using<div>ImageMagick. The image didn't have a close button so I used ps -A to find the</div><div>task. I didn't find any called ImageMagick but there was one named display.im6</div>
<div>and when I killed it, the icon on the task bar went away. But I also found a task</div><div>called rtkit-daemon which I killed. But now I also find a whole new directory</div><div>named /run which seems to have a lot of executables in it. All time stamped</div>
<div>about the time this happened. Whoops, I forgot 24 hour clock. The time stamps</div><div>are this morning so maybe it doesn't have to do with the GIF. In any case I assume everything in /run is trojaned.</div>
<div><br></div><div>I am open for advice.</div><div><br></div><div>Richard</div><div><br></div></div>
<br>_______________________________________________<br>
vox-tech mailing list<br>
<a href="mailto:vox-tech@lists.lugod.org">vox-tech@lists.lugod.org</a><br>
<a href="http://lists.lugod.org/mailman/listinfo/vox-tech" target="_blank">http://lists.lugod.org/mailman/listinfo/vox-tech</a><br>
<br></blockquote></div>